topic Re: Separate ftp log in Operating System - HP-UX

Separate ftp log

M. Tariq Ayub — Mon, 12 Apr 2004 23:17:55 GMT

Hi,

I want to create a separate log file that will only have ftp related log. I donot want ftp information to be in the syslog.log.

What changes do i need to do in syslog.conf or in any other configuration file.

Tariq

Re: Separate ftp log

Sanjay Kumar Suri — Tue, 13 Apr 2004 00:06:44 GMT

I don't think it is possible through changes in configuration file.

You can do the following periodically and redirect the output to some file.

grep "FTP" syslog.log

sks

Re: Separate ftp log

Michael Tully — Tue, 13 Apr 2004 00:21:21 GMT

All you need do is change the syslog.conf file and away you go.

Add this to /etc/syslog.conf

local5.info;mail.none /var/adm/syslog/ftp.log

Then get syslogd to re-read it's config.

# kill -HUP `cat /var/run/syslog.pid`

Re: Separate ftp log

M. Tariq Ayub — Tue, 13 Apr 2004 00:28:31 GMT

Hi,

This will create all entries to ftplog? I donot want to do that. I want only ftp entries will go to ftplog and all other entries will go to syslog like now.

Tariq

Re: Separate ftp log

Hoefnix — Tue, 13 Apr 2004 04:04:26 GMT

Hi,

No not all syslog messages will go to this log, only local5 messages.
I tried to find a link with the spec of all local0 .. local7 entries you can use, but without succes.(read also the manpage of syslog)
I assume what the previous post does is, route all the messages from ftpd (or from inetd?) to the new logfile.
So other messages are still logged to syslog.log.

HTH,
Peter

Re: Separate ftp log

Sanjiv Sharma_1 — Tue, 13 Apr 2004 04:16:46 GMT

Hi Tariq,

Please check this link:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=214847

hth.

Re: Separate ftp log

Geoff Wild — Tue, 13 Apr 2004 07:48:08 GMT

ftp is a daemon - I did it like this in my /etc/syslog.conf:

# @(#)B.11.11_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
daemon.info;mail.none /var/adm/syslog/daemon.log
*.info;mail.none,daemon.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *

However - that will log all daemons - including MC/SG....

After changes, make syslogd re-read the file:

kill -HUP `cat /var/run/syslog.pid`

Rgds...Geoff

Re: Separate ftp log

Jeff Schussele — Tue, 13 Apr 2004 08:57:02 GMT

Hi Tariq,

You can keep records of all files received & transmitted by the ftp server by using -i & -o on the ftpd command line in /etc/inetd.conf.
File logged to would be /var/adm/syslog/xfer.log

You can also enable the same functionality by making the following entries in the /etc/ftpd/ftpaccess file:

log commands real
log transfers anonymous,real inbound, outbound

The connections themselves would still be recorded in syslog.log, but the actual ftpd actions will be in xfer.log

man ftpd, ftpaccess, & xferlog for further details.

HTH,
Jeff